Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/252B74B271E711EC93623E71C4F9AE02.roa
File:                     252B74B271E711EC93623E71C4F9AE02.roa (raw, json)
Hash identifier:          u+cD2oQtW+rp4Xp4hfxe3f/9ihPff/PhVRmR6/SKm+M=
Subject key identifier:   2D:B7:E9:FB:55:AC:91:32:58:77:CF:D3:9F:16:96:FA:0D:1B:B1:15
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39E9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/252B74B271E711EC93623E71C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:50:58 +0000
ROA not before:           Mon 14 Jul 2025 14:50:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24067
IP address blocks:        61.91.196.0/24 maxlen: 24
                          61.91.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14825 (0x39e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751952-6bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:db:af:08:cd:8c:40:81:b8:9d:21:86:f5:
                    8a:bb:5f:30:aa:fc:f2:b3:44:3c:69:e0:45:07:f3:
                    6e:49:ac:90:f2:65:61:dc:55:41:6e:4b:87:54:c9:
                    4c:ab:e8:2b:2a:d5:6a:b4:1b:26:86:57:05:0d:0f:
                    7d:8e:eb:fc:1a:df:91:d3:17:02:38:e9:17:aa:13:
                    3b:e8:70:ae:ae:16:4c:2b:24:94:86:8b:89:45:c4:
                    ae:79:b2:a4:5a:1b:dd:ab:7e:d5:de:12:d9:1b:e3:
                    e9:eb:9e:72:b1:38:e8:59:22:48:d5:e7:71:0b:36:
                    a5:ce:4a:ed:f2:59:93:ef:1c:fa:81:09:f3:7f:31:
                    ea:3b:20:ad:e6:3b:f4:7d:db:35:78:d7:fc:08:86:
                    85:6c:c0:88:a2:82:7a:5d:97:14:70:f5:ea:2a:e2:
                    09:0e:b1:e2:02:f4:a0:7b:4d:29:b8:4e:a7:aa:db:
                    e7:9b:ab:f5:2a:54:42:c7:4d:d3:02:8b:51:35:28:
                    c3:60:24:8b:4c:ff:71:9a:f3:7f:24:af:bc:91:7e:
                    3e:0b:a9:aa:4b:8f:79:51:a2:07:05:58:a7:ae:84:
                    0e:3b:a0:a7:a3:92:1b:cf:f5:d2:57:02:db:c1:02:
                    30:b9:d5:4c:a2:56:d6:66:31:e5:72:6f:76:7e:01:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B7:E9:FB:55:AC:91:32:58:77:CF:D3:9F:16:96:FA:0D:1B:B1:15
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/252B74B271E711EC93623E71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:d8:b0:e2:be:7b:e0:f1:a8:a7:eb:f5:28:0a:4b:a5:68:
         a7:45:92:dd:41:fe:6d:d8:a0:00:17:0d:48:cc:f2:11:99:36:
         df:c5:e0:21:d0:ec:57:2e:0d:b1:02:ab:d7:0a:9b:4a:67:da:
         21:be:ad:94:43:e2:58:fb:f6:e8:92:7f:52:1a:31:f8:fd:a5:
         aa:20:d4:93:05:39:5c:05:a5:0d:ee:ed:4b:67:e9:ce:cc:8b:
         25:04:a7:12:70:00:03:6d:ec:76:b7:e5:41:fc:2f:bd:95:24:
         8e:6e:ad:69:d0:db:b9:c8:97:f2:1c:3d:44:a5:74:0f:2d:4d:
         04:8a:54:56:56:c4:fc:02:db:35:a0:64:47:09:38:35:37:76:
         9c:db:9a:1e:33:db:e1:90:1e:70:84:c7:6a:21:2c:66:c0:36:
         41:3f:62:92:d8:1a:49:50:58:fa:68:84:c5:ad:d7:2a:13:e2:
         6e:ce:0b:4a:e0:73:81:05:8c:f9:fe:b2:af:0d:34:5f:25:e7:
         59:bc:a4:74:3b:99:12:0a:0d:b5:40:0b:b4:2e:1b:e6:1e:b7:
         1c:ae:f4:30:5b:e2:2a:b4:ac:82:8d:60:f9:79:3f:01:4f:80:
         a3:a6:f8:82:69:5f:12:c2:75:62:93:d3:f1:31:10:4e:cc:c3:
         ee:0f:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:17:48 2025 by rpki-client